Bug#940578: fixed in cups 2.3.0-6

[Didier 'OdyX' Raboud <odyx@debian.org>]

Le jeudi, 21 novembre 2019, 08.46:43 h CET intrigeri a écrit :
> Hi,
> 
> Rudolf Polzer:
> > For me it is still not working, because I changed
> > /etc/cups/cups-pdf.conf
> > 
> > from
> > Out ${HOME}/Transport
> > to
> > Out ${HOME}
> > 
> > and get the error message
> > 
> > audit[5146]: AVC apparmor="DENIED" operation="mknod"
> > profile="/usr/lib/cups/backend/cups-pdf" name="/home/rudi/home_rudi.pdf"
> > pid=5146 comm="gs" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
> 
> Indeed, the fix only covers sub-directories of $HOME.
> Technically it's easy to also support this use case.
> I'm happy to implement this if the CUPS maintainers
> prefer a more lenient AppArmor confinement of cups-pdf,
> in order to improve UX in this (arguably corner) case.

As CUPS maintainer; the current situation is fine; I find letting cups-pdf 
write to $HOME directly to be debatable; and the error makes sense.

Cheers,

    OdyX